Live Exploited Vulnerability Feed
Evidence-backed KEV intelligence enriched with confidence scoring, exploitation status, CISA KEV status, and sensor telemetry.
| CVE | Product | Vendor | Confidence | Exploitation Status | Sensors | First Seen | Added | Artifacts |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-4601 | RH - Real Estate WordPress Theme | InspiryThemes | Medium | Active exploitation | — | about 1 hour ago | about 1 hour ago |
—
|
| CVE-2026-48907 | Joomla Content Editor (JCE) extension for Joomla | joomlacontenteditor.net | Confirmed | Active exploitation | — | 2 days ago | 2 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-39813 | FortiSandbox, FortiSandbox Cloud | Fortinet | High | Active exploitation | Yes | 2 days ago | 2 days ago |
PoC
|
| CVE-2026-53435 | Jenkins | Jenkins Project | High | Active exploitation | — | 2 days ago | 2 days ago |
PoC
|
| CVE-2026-20253 | Splunk Enterprise | Splunk | High | Active exploitation | Yes | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2017-15363 | Restler | Luracast | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-20262 | Cisco Catalyst SD-WAN Manager | Cisco | Confirmed | Active exploitation | — | 3 days ago | 3 days ago |
PoC
|
| CVE-2024-27497 | E2000 | Linksys | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2017-9833 | Boa Web Server | Boa | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2025-27222 | TRUfusion Enterprise | Rocket Software | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2024-32738 | CyberPower PowerPanel Enterprise | CyberPower | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2022-25485 | CuppaCMS | CuppaCMS | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2020-24949 | PHP-Fusion | PHP-Fusion | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2022-25486 | CuppaCMS | CuppaCMS | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2024-31750 | datacube3 | f-logic | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2023-31059 | Repetier Server | Repetier | Medium | Active exploitation | — | 3 days ago | 3 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-54420 | cPanel Plugin | LiteSpeed Technologies | Confirmed | Active exploitation | — | 4 days ago | 4 days ago |
PoC
|
| CVE-2023-39796 | WBCE CMS | WBCE | Medium | Active exploitation | — | 4 days ago | 4 days ago |
PoC
Nuclei
Scanner
|
| CVE-2022-38296 | Cuppa CMS | Cuppa CMS | Medium | Active exploitation | — | 5 days ago | 5 days ago |
PoC
Nuclei
Scanner
|
| CVE-2026-39808 | FortiSandbox, FortiSandbox PaaS | Fortinet | High | Active exploitation | Yes | 5 days ago | 5 days ago |
PoC
Nuclei
Scanner
|
| CVE-2021-31805 | Apache Struts | Apache Software Foundation | High | Active exploitation | Yes | 6 days ago | 6 days ago |
PoC
Nuclei
Scanner
|
| CVE-2020-6286 | SAP NetWeaver AS JAVA (LM Configuration Wizard) | SAP SE | High | Active exploitation | Yes | 6 days ago | 6 days ago |
PoC
|
| CVE-2026-35273 | PeopleSoft Enterprise PeopleTools | Oracle Corporation | Confirmed | Active exploitation | Yes | 6 days ago | 6 days ago |
PoC
|
| CVE-2026-10795 | UpdraftPlus: WP Backup & Migration Plugin | davidanderson | Medium | Active exploitation | — | 7 days ago | 7 days ago |
PoC
|
| CVE-2025-5821 | Case Theme User | Case-Themes | Medium | Active exploitation | — | 7 days ago | 7 days ago |
—
|